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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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2a)D This action is FINAL. 2b)[X] This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1 935 CD. 1 1 , 453 O.G. 21 3. 
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application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 

1 . Claims 1 -20 have been examined. 

Oath/Declaration 

2. The oath or declaration is defective. A new oath or declaration in compliance 
with 37 CFR 1.67(a) identifying this application by application number and filing date is 
required. See MPEP §§ 602.01 and 602.02. 

The oath or declaration is defective because: It is not signed by all the inventors. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

4. Claims 1-20 are rejected under 35 U.S.C. 102(e) as being anticipated by Win et 
al. (hereinafter Win) United States Letter Patent Number 6,182,142. 

As per claim 1: 
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Win teaches a method of managing invalid password attempts, said method 
comprising: 

receiving a message from a computer system,' wherein the message includes a 
distinguished name, the distinguished name corresponding to a failed login attempt; 
(Col. 10, lines 26-38) 

calculating a total failed login attempt number corresponding to the distinguished 
name; (Col. 10, lines 39-41) 

identifying a failed login attempt allowed number; (Col. 10, lines 46-48) 

determining whether the total failed login attempt number is greater than the 
failed login attempt allowed number; (Col. 10, lines 38-41) and 

revoking a password corresponding to the distinguished name based on the 
determination. (Col. 10, lines 41-43) 
As per claims 2, 9, and 15: 

Win teaches all the subject matter as discussed above. In addition, Win further 
discloses a method wherein the message is received from a plurality of servers. (Col. 4, 
lines 44-46; Col. 7, lines 56-62) 
As per claims 3, 10 and 16: 

Win teaches all the subject matter as discussed above. In addition, Win further 
discloses a method comprising: 

establishing a secure connection with the computer system; (Col. 3, lines 7-11; 
Col. 4, lines 60-61 ; Col. 6, lines 1 5-1 6) and 
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verifying a digital certificate corresponding to the computer system, wherein the 
digital certificate is included in the message. (Col. 6, lines 8-10; Col. 18, lines 6-8; Col. 
20, lines 31-33; Col. 23, lines 16-19) 
As per claims 4, 1 1 and 1 7: 

Win teaches all the subject matter as discussed above. In addition, Win further 
discloses a method wherein the determining comprises: 

configuring parameters, wherein the parameters include a login tracking period; 
(Col. 9, lines 34-37; Col. 10, lines 6-12 and lines 19-22) 

storing a record in a failed login data store, the record including the distinguished 
name and a timestamp corresponding to a time the message was received; (Col. 10, 
lines 32-38 and lines 46-49; Col. 12, lines 46-48) and 

removing one or more records from the failed login data store in response to one 
or more corresponding timestamps being older than the tracking period. (Col. 10, lines 
41-43; Col. 20, linesl -2) 
As per claims 5, 7, 12, 18 and 20: 

Win teaches all the subject matter as discussed above: In addition, Win further 
discloses a method wherein the revoking further includes: 

preparing a password revocation message, the password revocation message 
identifying the distinguished name; (Col. 10, lines 2-4) and 

sending the password revocation message to one or more login servers, wherein 
the login servers include the computer system. (Col. 10, lines 4-5) 
As per claims 6, 13 and 19: 
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Win teaches all the subject matter as discussed above. In addition, Win further 
discloses a method comprising: 

establishing a secure connection to each of the login servers; (Col. 3, lines 7-11; 
Col. 4, lines 60-61 ; Col. 6, lines 1 5-1 6) and 

including a digital signature identifying a sending computer system in the 
password revocation message. (Col. 6, lines 8-10; Col. 18, lines 6-8; Col. 20, lines 31- 
33; Col. 23, lines 16-19) 
As per claim 8: 

Win teaches an information handling system comprising: 

one or more processors; (Figure 9, item 904) 

a memory accessible by the processors; (Figure 9, item 906) 

one or more nonvolatile storage devices accessible by the processors; (Figure 9, 
item 908) 

a password managing tool to process invalid password attempts, the password 
managing tool including: 

means for receiving a message from a computer system, wherein the message 
includes a distinguished name, the distinguished name corresponding to a failed login 
attempt; (Col. 10, lines 26-38) 

means for calculating a total failed login attempt number corresponding to the 
distinguished name; (Col. 10, lines 39-41) 

means for identifying a failed login attempt allowed number; (Col. 10, lines 46-48) 
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means for determining whether the total failed login attempt number is greater 
than the failed login attempt allowed number; (Col. 10, lines 38-41 ) and 

means for revoking a password corresponding to the distinguished name based 
on the determination. (Col. 10, lines 41-43) 
As per claim 14: 

Win teaches a computer program product stored in a computer operable media 
for processing invalid password attempts, said computer program product comprising: 

means for receiving a message from a computer system, wherein the message 
includes a distinguished name, the distinguished name corresponding to a failed login 
attempt; (Col. 10, lines 26-38) 

means for calculating a total failed login attempt number corresponding to the 
distinguished name; (Col. 10, lines 39-41) 

means for identifying a failed login attempt allowed number; (Col. 10, lines 46-48) 

means for determining whether the total failed login attempt number is greater 
than the failed login attempt allowed number; (Col. 10, lines 38-41) and 

means for revoking a password corresponding to the distinguished name based 
on the determination. (Col. 10, lines 41-43) 

5. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See PTO Form 892. 
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6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shewaye Gelagay whose telephone number is 571-272- 
4219. The examiner can normally be reached on 8:00 am to 5:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert Decady can be reached on 571-272-3819. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Shewaye Gelagay 

Examiner 
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